@certscore/mcp
MCP server for CertScore public website risk-signal workflows.
npm · fingerprint 513c08a30f5a0cd23b0fd9a3 · repository · RSS
14tools
4recorded versions
24dtracked
unchanged 13d
What changed
Changed 2026-10-17 10:52 UTC
5 schema or annotation changes with the description left byte-identical.
--- pinned/certscore_get_latest_domain_scan +++ observed/certscore_get_latest_domain_scan { "annotations": { "openWorldHint": true, + "exampleCoverage": { + "additionalProperties": false, + "properties": { + "byteBudgetLimited": { + "type": "boolean" + }, + "observedNodeCount": { + "maximum": 200000000, + "minimum": 0, + "type": "integer" + }, + "omittedNodeCount": { + "maximum": 200000000, + "minimum": 0, + "type": "integer" + }, + "retainedNodeCount": { + "maximum": 1000, + "minimum": 0, + "type": "integer" + }, + "version": { + "const": "breadth_before_detail.v1", + "type": "string" + } + }, + "required": [ + "version", + "observedNodeCount", + "retainedNodeCount", + "omittedNodeCount", + "byteBudgetLimited" + ], + "type": "object" + }, "failedRuleCount": { "anyOf": [ { + "postureScores": { + "additionalProperties": false, + "properties": { + "ccpaCpra": { + "additionalProperties": false, + "properties": { + "coverage": { + "enum": [ + "bounded", + "limited", + "unavailable" + ], + "type": "string" + }, + "policyVersion": { + "const": "california-regulatory-posture.v1", + "type": "string" + }, + "posture": { + "const": "ccpa_cpra", + "type": "string" + }, + "scope": { + "const": "starting_page", + "type": "string" + }, + "score": { + "anyOf": [ + { + "maximum": 100, + "minimum": 0, + "type": "integer" + }, + { + "type": "null" + } + ] + } + }, + "required": [ + "posture", + "score", + "policyVersion", + "coverage", + "scope" + ], + "type": "object" + }, + "contractVersion": { + "const": "certscore.posture-scores.v1", + "type": "string" + }, + "gdprEprivacy": { + "additionalProperties": false, + "properties": { + "coverage": { + "enum": [ + "scored", + "unavailable" + ], + "type": "string" + }, + "policyVersion": { + "type": [ + "string", + "null" + ] + }, + "posture": { + "const": "gdpr_eprivacy", + "type": "string" + }, + "scope": { + "const": "starting_page", + "type": "string" + }, + "score": { + "anyOf": [ + { + "maximum": 100, + "minimum": 0, + "type": "integer" + }, + { + "type": "null" + } + ] + } + }, + "required": [ + "posture", + "score", + "policyVersion", + "coverage", + "scope" + ], + "type": "object" + } + }, + "required": [ + "contractVersion", + "gdprEprivacy", + "ccpaCpra" + ], + "type": "object" + }, "privacyAuditEvidence": { "anyOf": [ {
--- pinned/certscore_get_scan +++ observed/certscore_get_scan { "annotations": { "openWorldHint": true, + "exampleCoverage": { + "additionalProperties": false, + "properties": { + "byteBudgetLimited": { + "type": "boolean" + }, + "observedNodeCount": { + "maximum": 200000000, + "minimum": 0, + "type": "integer" + }, + "omittedNodeCount": { + "maximum": 200000000, + "minimum": 0, + "type": "integer" + }, + "retainedNodeCount": { + "maximum": 1000, + "minimum": 0, + "type": "integer" + }, + "version": { + "const": "breadth_before_detail.v1", + "type": "string" + } + }, + "required": [ + "version", + "observedNodeCount", + "retainedNodeCount", + "omittedNodeCount", + "byteBudgetLimited" + ], + "type": "object" + }, "failedRuleCount": { "anyOf": [ { + "postureScores": { + "additionalProperties": false, + "properties": { + "ccpaCpra": { + "additionalProperties": false, + "properties": { + "coverage": { + "enum": [ + "bounded", + "limited", + "unavailable" + ], + "type": "string" + }, + "policyVersion": { + "const": "california-regulatory-posture.v1", + "type": "string" + }, + "posture": { + "const": "ccpa_cpra", + "type": "string" + }, + "scope": { + "const": "starting_page", + "type": "string" + }, + "score": { + "anyOf": [ + { + "maximum": 100, + "minimum": 0, + "type": "integer" + }, + { + "type": "null" + } + ] + } + }, + "required": [ + "posture", + "score", + "policyVersion", + "coverage", + "scope" + ], + "type": "object" + }, + "contractVersion": { + "const": "certscore.posture-scores.v1", + "type": "string" + }, + "gdprEprivacy": { + "additionalProperties": false, + "properties": { + "coverage": { + "enum": [ + "scored", + "unavailable" + ], + "type": "string" + }, + "policyVersion": { + "type": [ + "string", + "null" + ] + }, + "posture": { + "const": "gdpr_eprivacy", + "type": "string" + }, + "scope": { + "const": "starting_page", + "type": "string" + }, + "score": { + "anyOf": [ + { + "maximum": 100, + "minimum": 0, + "type": "integer" + }, + { + "type": "null" + } + ] + } + }, + "required": [ + "posture", + "score", + "policyVersion", + "coverage", + "scope" + ], + "type": "object" + } + }, + "required": [ + "contractVersion", + "gdprEprivacy", + "ccpaCpra" + ], + "type": "object" + }, "privacyAuditEvidence": { "anyOf": [ {
--- pinned/certscore_get_scan_bundle +++ observed/certscore_get_scan_bundle { "annotations": { "destructiveHint": false, + "exampleCoverage": { + "additionalProperties": false, + "properties": { + "byteBudgetLimited": { + "type": "boolean" + }, + "observedNodeCount": { + "maximum": 200000000, + "minimum": 0, + "type": "integer" + }, + "omittedNodeCount": { + "maximum": 200000000, + "minimum": 0, + "type": "integer" + }, + "retainedNodeCount": { + "maximum": 1000, + "minimum": 0, + "type": "integer" + }, + "version": { + "const": "breadth_before_detail.v1", + "type": "string" + } + }, + "required": [ + "version", + "observedNodeCount", + "retainedNodeCount", + "omittedNodeCount", + "byteBudgetLimited" + ], + "type": "object" + }, "failedRuleCount": { "anyOf": [ { + "postureScores": { + "additionalProperties": false, + "properties": { + "ccpaCpra": { + "additionalProperties": false, + "properties": { + "coverage": { + "enum": [ + "bounded", + "limited", + "unavailable" + ], + "type": "string" + }, + "policyVersion": { + "const": "california-regulatory-posture.v1", + "type": "string" + }, + "posture": { + "const": "ccpa_cpra", + "type": "string" + }, + "scope": { + "const": "starting_page", + "type": "string" + }, + "score": { + "anyOf": [ + { + "maximum": 100, + "minimum": 0, + "type": "integer" + }, + { + "type": "null" + } + ] + } + }, + "required": [ + "posture", + "score", + "policyVersion", + "coverage", + "scope" + ], + "type": "object" + }, + "contractVersion": { + "const": "certscore.posture-scores.v1", + "type": "string" + }, + "gdprEprivacy": { + "additionalProperties": false, + "properties": { + "coverage": { + "enum": [ + "scored", + "unavailable" + ], + "type": "string" + }, + "policyVersion": { + "type": [ + "string", + "null" + ] + }, + "posture": { + "const": "gdpr_eprivacy", + "type": "string" + }, + "scope": { + "const": "starting_page", + "type": "string" + }, + "score": { + "anyOf": [ + { + "maximum": 100, + "minimum": 0, + "type": "integer" + }, + { + "type": "null" + } + ] + } + }, + "required": [ + "posture", + "score", + "policyVersion", + "coverage", + "scope" + ], + "type": "object" + } + }, + "required": [ + "contractVersion", + "gdprEprivacy", + "ccpaCpra" + ], + "type": "object" + }, "preConsentCookiesTrackers": { "additionalProperties": false, "properties": {
--- pinned/certscore_get_scan_status +++ observed/certscore_get_scan_status { "annotations": { "destructiveHint": false, + "exampleCoverage": { + "additionalProperties": false, + "properties": { + "byteBudgetLimited": { + "type": "boolean" + }, + "observedNodeCount": { + "maximum": 200000000, + "minimum": 0, + "type": "integer" + }, + "omittedNodeCount": { + "maximum": 200000000, + "minimum": 0, + "type": "integer" + }, + "retainedNodeCount": { + "maximum": 1000, + "minimum": 0, + "type": "integer" + }, + "version": { + "const": "breadth_before_detail.v1", + "type": "string" + } + }, + "required": [ + "version", + "observedNodeCount", + "retainedNodeCount", + "omittedNodeCount", + "byteBudgetLimited" + ], + "type": "object" + }, "failedRuleCount": { "anyOf": [ { + "postureScores": { + "additionalProperties": false, + "properties": { + "ccpaCpra": { + "additionalProperties": false, + "properties": { + "coverage": { + "enum": [ + "bounded", + "limited", + "unavailable" + ], + "type": "string" + }, + "policyVersion": { + "const": "california-regulatory-posture.v1", + "type": "string" + }, + "posture": { + "const": "ccpa_cpra", + "type": "string" + }, + "scope": { + "const": "starting_page", + "type": "string" + }, + "score": { + "anyOf": [ + { + "maximum": 100, + "minimum": 0, + "type": "integer" + }, + { + "type": "null" + } + ] + } + }, + "required": [ + "posture", + "score", + "policyVersion", + "coverage", + "scope" + ], + "type": "object" + }, + "contractVersion": { + "const": "certscore.posture-scores.v1", + "type": "string" + }, + "gdprEprivacy": { + "additionalProperties": false, + "properties": { + "coverage": { + "enum": [ + "scored", + "unavailable" + ], + "type": "string" + }, + "policyVersion": { + "type": [ + "string", + "null" + ] + }, + "posture": { + "const": "gdpr_eprivacy", + "type": "string" + }, + "scope": { + "const": "starting_page", + "type": "string" + }, + "score": { + "anyOf": [ + { + "maximum": 100, + "minimum": 0, + "type": "integer" + }, + { + "type": "null" + } + ] + } + }, + "required": [ + "posture", + "score", + "policyVersion", + "coverage", + "scope" + ], + "type": "object" + } + }, + "required": [ + "contractVersion", + "gdprEprivacy", + "ccpaCpra" + ], + "type": "object" + }, "preConsentPreview": { "additionalProperties": false, "properties": {
--- pinned/certscore_scan_site +++ observed/certscore_scan_site { "annotations": { "destructiveHint": false, + "exampleCoverage": { + "additionalProperties": false, + "properties": { + "byteBudgetLimited": { + "type": "boolean" + }, + "observedNodeCount": { + "maximum": 200000000, + "minimum": 0, + "type": "integer" + }, + "omittedNodeCount": { + "maximum": 200000000, + "minimum": 0, + "type": "integer" + }, + "retainedNodeCount": { + "maximum": 1000, + "minimum": 0, + "type": "integer" + }, + "version": { + "const": "breadth_before_detail.v1", + "type": "string" + } + }, + "required": [ + "version", + "observedNodeCount", + "retainedNodeCount", + "omittedNodeCount", + "byteBudgetLimited" + ], + "type": "object" + }, "failedRuleCount": { "anyOf": [ { + "postureScores": { + "additionalProperties": false, + "properties": { + "ccpaCpra": { + "additionalProperties": false, + "properties": { + "coverage": { + "enum": [ + "bounded", + "limited", + "unavailable" + ], + "type": "string" + }, + "policyVersion": { + "const": "california-regulatory-posture.v1", + "type": "string" + }, + "posture": { + "const": "ccpa_cpra", + "type": "string" + }, + "scope": { + "const": "starting_page", + "type": "string" + }, + "score": { + "anyOf": [ + { + "maximum": 100, + "minimum": 0, + "type": "integer" + }, + { + "type": "null" + } + ] + } + }, + "required": [ + "posture", + "score", + "policyVersion", + "coverage", + "scope" + ], + "type": "object" + }, + "contractVersion": { + "const": "certscore.posture-scores.v1", + "type": "string" + }, + "gdprEprivacy": { + "additionalProperties": false, + "properties": { + "coverage": { + "enum": [ + "scored", + "unavailable" + ], + "type": "string" + }, + "policyVersion": { + "type": [ + "string", + "null" + ] + }, + "posture": { + "const": "gdpr_eprivacy", + "type": "string" + }, + "scope": { + "const": "starting_page", + "type": "string" + }, + "score": { + "anyOf": [ + { + "maximum": 100, + "minimum": 0, + "type": "integer" + }, + { + "type": "null" + } + ] + } + }, + "required": [ + "posture", + "score", + "policyVersion", + "coverage", + "scope" + ], + "type": "object" + } + }, + "required": [ + "contractVersion", + "gdprEprivacy", + "ccpaCpra" + ], + "type": "object" + }, "preConsentPreview": { "additionalProperties": false, "properties": {
Changed 2026-10-15 11:33 UTC
1 description rewritten, 5 schema or annotation changes with the description left byte-identical.
--- pinned/certscore_get_latest_domain_scan +++ observed/certscore_get_latest_domain_scan { "annotations": { "openWorldHint": true, + "evidenceScope": { + "const": "stable_main_document_positive_findings", + "type": "string" + }, "failedRuleCount": { "anyOf": [ {
--- pinned/certscore_get_report_evidence_page +++ observed/certscore_get_report_evidence_page { "annotations": { "destructiveHint": false, - "description": "For a focused question, use section=cmp, cms, consent, gpc, policy, tracking, transport, forms or accessibility. This returns selected retained report sections plus shared scan, score, findings and coverage context. CMP includes all 13 criteria with their assessment results and retained comparisons; CMS includes platform/version evidence and existing advisories. detailedEvidence carries shared display wording, counts and cross-links; these audit rows are not additional findings. Preserve section on cursor continuation; unselected or not-returned fields are not evidence of absence. Use workpaper=tracking separately for the starting-page tracking inventory, privacy choices/notices and GPC evidence, with JSON and CSV downloads. Never combine section and workpaper. The workpaper selector also applies to every continuation request. Otherwise retrieve scan report display content as paginated JSON, without internal diagnostic JSON downloads. The response also offers a single-file full JSON download; private JSON download links expire after five minutes and need no OAuth header; use pagination if your host blocks file downloads. Repeated display records use reportContentRef JSON Pointers. Includes evidence tables, full-site page and resource inventories, all retained additional-page form fields, form snapshot download references, and retained limitations. Snapshot images are downloaded separately from the returned URLs, with OAuth bearer authentication for workspace scans. Available on OAuth and Light. Start with scanId; follow pagination.nextCursor until complete. Pages share a snapshot; restart if it changes. Each entry has a JSON Pointer path and value; oversized strings use numbered parts. Export completion is not complete observation coverage. Use the concise scan bundle for summaries; use this tool for exhaustive report evidence. No new scan is created.", + "description": "For a focused question, use section=cmp, cms, consent, gpc, policy, tracking, transport, forms or accessibility. This returns selected retained report sections plus shared scan, score, findings and coverage context. CMP includes all 13 criteria with their assessment results and retained comparisons; CMS includes platform/version evidence and existing advisories. Policy also includes retained privacy-choice controls, unverified link candidates and notice passages; California-focused reports include their shared privacy section. detailedEvidence carries shared display wording, counts and cross-links; these audit rows are not additional findings. Preserve section on cursor continuation; unselected or not-returned fields are not evidence of absence. Use workpaper=tracking separately for the starting-page tracking inventory, privacy choices/notices and GPC evidence, with JSON and CSV downloads. Never combine section and workpaper. The workpaper selector also applies to every continuation request. Otherwise retrieve scan report display content as paginated JSON, without internal diagnostic JSON downloads. The response also offers a single-file full JSON download; private JSON download links expire after five minutes and need no OAuth header; use pagination if your host blocks file downloads. Repeated display records use reportContentRef JSON Pointers. Includes evidence tables, full-site page and resource inventories, all retained additional-page form fields, form snapshot download references, and retained limitations. Snapshot images are downloaded separately from the returned URLs, with OAuth bearer authentication for workspace scans. Available on OAuth and Light. Start with scanId; follow pagination.nextCursor until complete. Pages share a snapshot; restart if it changes. Each entry has a JSON Pointer path and value; oversized strings use numbered parts. Export completion is not complete observation coverage. Use the concise scan bundle for summaries; use this tool for exhaustive report evidence. No new scan is created.", "execution": { "taskSupport": "forbidden" },
--- pinned/certscore_get_scan +++ observed/certscore_get_scan { "annotations": { "openWorldHint": true, + "evidenceScope": { + "const": "stable_main_document_positive_findings", + "type": "string" + }, "failedRuleCount": { "anyOf": [ {
--- pinned/certscore_get_scan_bundle +++ observed/certscore_get_scan_bundle { "annotations": { "destructiveHint": false, + "evidenceScope": { + "const": "stable_main_document_positive_findings", + "type": "string" + }, "failedRuleCount": { "anyOf": [ {
--- pinned/certscore_get_scan_status +++ observed/certscore_get_scan_status { "annotations": { "destructiveHint": false, + "evidenceScope": { + "const": "stable_main_document_positive_findings", + "type": "string" + }, "failedRuleCount": { "anyOf": [ {
--- pinned/certscore_scan_site +++ observed/certscore_scan_site { "annotations": { "destructiveHint": false, + "evidenceScope": { + "const": "stable_main_document_positive_findings", + "type": "string" + }, "failedRuleCount": { "anyOf": [ {
Changed 2026-10-14 12:05 UTC
1 description rewritten, 9 schema or annotation changes with the description left byte-identical.
--- pinned/certscore_explain_finding +++ observed/certscore_explain_finding { "annotations": { "openWorldHint": true, + "formsEvidence": { + "type": "string" + }, "latestDomainScan": { "type": "string" },
--- pinned/certscore_get_latest_domain_pre_consent_cookies_trackers +++ observed/certscore_get_latest_domain_pre_consent_cookies_trackers { "annotations": { "openWorldHint": true, + "formsEvidence": { + "type": "string" + }, "latestDomainScan": { "type": "string" },
--- pinned/certscore_get_latest_domain_scan +++ observed/certscore_get_latest_domain_scan { "annotations": { "openWorldHint": true, + "accessibilityAudit": { + "anyOf": [ + { + "additionalProperties": false, + "properties": { + "affectedNodeCount": { + "anyOf": [ + { + "minimum": 0, + "type": "integer" + }, + { + "type": "null" + } + ] + }, + "durationMs": { + "anyOf": [ + { + "minimum": 0, + "type": "integer" + }, + { + "type": "null" + } + ] + }, + "engine": { + "const": "axe-core", + "type": "string" + }, + "engineVersion": { + "type": [ + "string", + "null" + ] + }, + "failedRuleCount": { + "anyOf": [ + { + "minimum": 0, + "type": "integer" + }, + { + "type": "null" + } + ] + }, + "required": { + "const": true, + "type": "boolean" + }, + "reviewRuleCount": { + "anyOf": [ + { + "minimum": 0, + "type": "integer" + }, + { + "type": "null" + } + ] + }, + "scope": { + "const": "starting_page_rendered_content", + "type": "string" + }, + "status": { + "enum": [ + "completed", + "limited", + "failed", + "not_testable" + ], + "type": "string" + } + }, + "required": [ + "status", + "required", + "scope", + "engine", + "engineVersion", + "durationMs", + "failedRuleCount", + "affectedNodeCount", + "reviewRuleCount" + ], + "type": "object" + }, + { + "type": "null" + } + ] + }, "completedAt": { "type": [ "string", + "formsSummary": { + "anyOf": [ + { + "additionalProperties": false, + "properties": { + "afterAcceptCapture": { + "enum": [ + "retained", + "limited", + "unavailable" + ], + "type": "string" + }, + "afterAcceptObserved": { + "anyOf": [ + { + "minimum": 0, + "type": "integer" + }, + { + "type": "null" + } + ] + }, + "contractVersion": { + "const": "certscore.forms-summary.v1", + "type": "string" + }, + "countStatus": { + "enum": [ + "captured", + "limited", + "not_captured" + ], + "type": "string" + }, + "preConsentCapture": { + "enum": [ + "complete", + "limited", + "unavailable" + ], + "type": "string" + }, + "preConsentObserved": { + "anyOf": [ + { + "minimum": 0, + "type": "integer" + }, + { + "type": "null" + } + ] + }, + "scope": { + "const": "starting_page_reportable_observations", + "type": "string" + }, + "totalObserved": { + "minimum": 0, + "type": "integer" + } + }, + "required": [ + "contractVersion", + "scope", + "totalObserved", + "preConsentObserved", + "afterAcceptObserved", + "preConsentCapture", + "afterAcceptCapture" + ], + "type": "object" + }, + { + "type": "null" + } + ] + }, "gpcResponse": { "anyOf": [ { + "formsEvidence": { + "type": "string" + }, "latestDomainScan": { "type": "string" }, + "scoreExplanation": { + "anyOf": [ + { + "additionalProperties": false, + "properties": { + "baseScore": { + "const": 100, + "type": "number" + }, + "contractVersion": { + "const": "certscore.score-explanation.v1", + "type": "string" + }, + "deductions": { + "items": { + "additionalProperties": false, + "properties": { + "deductionPoints": { + "exclusiveMinimum": 0, + "type": "integer" + }, + "family": { + "maxLength": 80, + "type": "string" + }, + "label": { + "maxLength": 160, + "type": "string" + }, + "rules": { + "items": { + "additionalProperties": false, + "properties": { + "decisionVerification": { + "enum": [ + "confirmed", + "unconfirmed", + "not_applicable", + "unknown" + ], + "type": "string" + }, + "findingIds": { + "items": { + "maxLength": 180, + "type": "string" + }, + "maxItems": 4, + "type": "array" + }, + "label": { + "maxLength": 160, + "type": "string" + }, + "policyDeductionPoints": { + "exclusiveMinimum": 0, + "type": "integer" + }, + "ruleId": { + "maxLength": 160, + "type": "string" + } + }, + "required": [ + "ruleId", + "label", + "policyDeductionPoints", + "findingIds", + "decisionVerification" + ], + "type": "object" + }, + "maxItems": 40, + "type": "array" + } + }, + "required": [ + "family", + "label", + "deductionPoints", + "rules" + ], + "type": "object" + }, + "maxItems": 16, + "type": "array" + }, + "policyVersion": { + "maxLength": 120, + "type": "string" + }, + "scope": { + "const": "starting_page_canonical_score", + "type": "string" + }, + "score": { + "maximum": 100, + "minimum": 0, + "type": "integer" + }, + "scoreFloor": { + "const": 0, + "type": "number" + }, + "scoreVersion": { + "maxLength": 120, + "type": "string" + }, + "totalPolicyDeductionPoints": { + "minimum": 0, + "type": "integer" + } + }, + "required": [ + "contractVersion", + "scope", + "scoreVersion", + "policyVersion", + "baseScore", + "scoreFloor", + "score", + "totalPolicyDeductionPoints", + "deductions" + ], + "type": "object" + }, + { + "type": "null" + } + ] + }, "scoreStatus": { "enum": [ "provisional",
--- pinned/certscore_get_pre_consent_cookies_trackers +++ observed/certscore_get_pre_consent_cookies_trackers { "annotations": { "openWorldHint": true, + "formsEvidence": { + "type": "string" + }, "latestDomainScan": { "type": "string" },
--- pinned/certscore_get_report_evidence_page +++ observed/certscore_get_report_evidence_page { "annotations": { "destructiveHint": false, - "description": "For a focused question, use section=consent, gpc, policy, tracking, transport or forms. This returns selected retained report sections plus shared scan, score, findings and coverage context. Preserve section on cursor continuation; unselected or not-returned fields are not evidence of absence. Use workpaper=tracking separately for the starting-page tracking inventory, privacy choices/notices and GPC evidence, with JSON and CSV downloads. Never combine section and workpaper. The workpaper selector also applies to every continuation request. Otherwise retrieve scan report display content as paginated JSON, without internal diagnostic JSON downloads. The response also offers a single-file full JSON download; private JSON download links expire after five minutes and need no OAuth header; use pagination if your host blocks file downloads. Repeated display records use reportContentRef JSON Pointers. Includes evidence tables, full-site page and resource inventories, all retained additional-page form fields, form snapshot download references, and retained limitations. Snapshot images are downloaded separately from the returned URLs, with OAuth bearer authentication for workspace scans. Available on OAuth and Light. Start with scanId; follow pagination.nextCursor until complete. Pages share a snapshot; restart if it changes. Each entry has a JSON Pointer path and value; oversized strings use numbered parts. Export completion is not complete observation coverage. Use the concise scan bundle for summaries; use this tool for exhaustive report evidence. No new scan is created.", + "description": "For a focused question, use section=cmp, cms, consent, gpc, policy, tracking, transport, forms or accessibility. This returns selected retained report sections plus shared scan, score, findings and coverage context. CMP includes all 13 criteria with their assessment results and retained comparisons; CMS includes platform/version evidence and existing advisories. detailedEvidence carries shared display wording, counts and cross-links; these audit rows are not additional findings. Preserve section on cursor continuation; unselected or not-returned fields are not evidence of absence. Use workpaper=tracking separately for the starting-page tracking inventory, privacy choices/notices and GPC evidence, with JSON and CSV downloads. Never combine section and workpaper. The workpaper selector also applies to every continuation request. Otherwise retrieve scan report display content as paginated JSON, without internal diagnostic JSON downloads. The response also offers a single-file full JSON download; private JSON download links expire after five minutes and need no OAuth header; use pagination if your host blocks file downloads. Repeated display records use reportContentRef JSON Pointers. Includes evidence tables, full-site page and resource inventories, all retained additional-page form fields, form snapshot download references, and retained limitations. Snapshot images are downloaded separately from the returned URLs, with OAuth bearer authentication for workspace scans. Available on OAuth and Light. Start with scanId; follow pagination.nextCursor until complete. Pages share a snapshot; restart if it changes. Each entry has a JSON Pointer path and value; oversized strings use numbered parts. Export completion is not complete observation coverage. Use the concise scan bundle for summaries; use this tool for exhaustive report evidence. No new scan is created.", "execution": { "taskSupport": "forbidden" }, - "forms" + "forms", + "accessibility", + "cmp", + "cms" ], "type": "string" }, - "forms" + "forms", + "accessibility", + "cmp", + "cms" ], "type": "string" },
--- pinned/certscore_get_scan +++ observed/certscore_get_scan { "annotations": { "openWorldHint": true, + "accessibilityAudit": { + "anyOf": [ + { + "additionalProperties": false, + "properties": { + "affectedNodeCount": { + "anyOf": [ + { + "minimum": 0, + "type": "integer" + }, + { + "type": "null" + } + ] + }, + "durationMs": { + "anyOf": [ + { + "minimum": 0, + "type": "integer" + }, + { + "type": "null" + } + ] + }, + "engine": { + "const": "axe-core", + "type": "string" + }, + "engineVersion": { + "type": [ + "string", + "null" + ] + }, + "failedRuleCount": { + "anyOf": [ + { + "minimum": 0, + "type": "integer" + }, + { + "type": "null" + } + ] + }, + "required": { + "const": true, + "type": "boolean" + }, + "reviewRuleCount": { + "anyOf": [ + { + "minimum": 0, + "type": "integer" + }, + { + "type": "null" + } + ] + }, + "scope": { + "const": "starting_page_rendered_content", + "type": "string" + }, + "status": { + "enum": [ + "completed", + "limited", + "failed", + "not_testable" + ], + "type": "string" + } + }, + "required": [ + "status", + "required", + "scope", + "engine", + "engineVersion", + "durationMs", + "failedRuleCount", + "affectedNodeCount", + "reviewRuleCount" + ], + "type": "object" + }, + { + "type": "null" + } + ] + }, "completedAt": { "type": [ "string", + "formsSummary": { + "anyOf": [ + { + "additionalProperties": false, + "properties": { + "afterAcceptCapture": { + "enum": [ + "retained", + "limited", + "unavailable" + ], + "type": "string" + }, + "afterAcceptObserved": { + "anyOf": [ + { + "minimum": 0, + "type": "integer" + }, + { + "type": "null" + } + ] + }, + "contractVersion": { + "const": "certscore.forms-summary.v1", + "type": "string" + }, + "countStatus": { + "enum": [ + "captured", + "limited", + "not_captured" + ], + "type": "string" + }, + "preConsentCapture": { + "enum": [ + "complete", + "limited", + "unavailable" + ], + "type": "string" + }, + "preConsentObserved": { + "anyOf": [ + { + "minimum": 0, + "type": "integer" + }, + { + "type": "null" + } + ] + }, + "scope": { + "const": "starting_page_reportable_observations", + "type": "string" + }, + "totalObserved": { + "minimum": 0, + "type": "integer" + } + }, + "required": [ + "contractVersion", + "scope", + "totalObserved", + "preConsentObserved", + "afterAcceptObserved", + "preConsentCapture", + "afterAcceptCapture" + ], + "type": "object" + }, + { + "type": "null" + } + ] + }, "gpcResponse": { "anyOf": [ { + "formsEvidence": { + "type": "string" + }, "latestDomainScan": { "type": "string" }, + "scoreExplanation": { + "anyOf": [ + { + "additionalProperties": false, + "properties": { + "baseScore": { + "const": 100, + "type": "number" + }, + "contractVersion": { + "const": "certscore.score-explanation.v1", + "type": "string" + }, + "deductions": { + "items": { + "additionalProperties": false, + "properties": { + "deductionPoints": { + "exclusiveMinimum": 0, + "type": "integer" + }, + "family": { + "maxLength": 80, + "type": "string" + }, + "label": { + "maxLength": 160, + "type": "string" + }, + "rules": { + "items": { + "additionalProperties": false, + "properties": { + "decisionVerification": { + "enum": [ + "confirmed", + "unconfirmed", + "not_applicable", + "unknown" + ], + "type": "string" + }, + "findingIds": { + "items": { + "maxLength": 180, + "type": "string" + }, + "maxItems": 4, + "type": "array" + }, + "label": { + "maxLength": 160, + "type": "string" + }, + "policyDeductionPoints": { + "exclusiveMinimum": 0, + "type": "integer" + }, + "ruleId": { + "maxLength": 160, + "type": "string" + } + }, + "required": [ + "ruleId", + "label", + "policyDeductionPoints", + "findingIds", + "decisionVerification" + ], + "type": "object" + }, + "maxItems": 40, + "type": "array" + } + }, + "required": [ + "family", + "label", + "deductionPoints", + "rules" + ], + "type": "object" + }, + "maxItems": 16, + "type": "array" + }, + "policyVersion": { + "maxLength": 120, + "type": "string" + }, + "scope": { + "const": "starting_page_canonical_score", + "type": "string" + }, + "score": { + "maximum": 100, + "minimum": 0, + "type": "integer" + }, + "scoreFloor": { + "const": 0, + "type": "number" + }, + "scoreVersion": { + "maxLength": 120, + "type": "string" + }, + "totalPolicyDeductionPoints": { + "minimum": 0, + "type": "integer" + } + }, + "required": [ + "contractVersion", + "scope", + "scoreVersion", + "policyVersion", + "baseScore", + "scoreFloor", + "score", + "totalPolicyDeductionPoints", + "deductions" + ], + "type": "object" + }, + { + "type": "null" + } + ] + }, "scoreStatus": { "enum": [ "provisional",
--- pinned/certscore_get_scan_bundle +++ observed/certscore_get_scan_bundle { "annotations": { "destructiveHint": false, + "accessibilityAudit": { + "anyOf": [ + { + "additionalProperties": false, + "properties": { + "affectedNodeCount": { + "anyOf": [ + { + "minimum": 0, + "type": "integer" + }, + { + "type": "null" + } + ] + }, + "durationMs": { + "anyOf": [ + { + "minimum": 0, + "type": "integer" + }, + { + "type": "null" + } + ] + }, + "engine": { + "const": "axe-core", + "type": "string" + }, + "engineVersion": { + "type": [ + "string", + "null" + ] + }, + "failedRuleCount": { + "anyOf": [ + { + "minimum": 0, + "type": "integer" + }, + { + "type": "null" + } + ] + }, + "required": { + "const": true, + "type": "boolean" + }, + "reviewRuleCount": { + "anyOf": [ + { + "minimum": 0, + "type": "integer" + }, + { + "type": "null" + } + ] + }, + "scope": { + "const": "starting_page_rendered_content", + "type": "string" + }, + "status": { + "enum": [ + "completed", + "limited", + "failed", + "not_testable" + ], + "type": "string" + } + }, + "required": [ + "status", + "required", + "scope", + "engine", + "engineVersion", + "durationMs", + "failedRuleCount", + "affectedNodeCount", + "reviewRuleCount" + ], + "type": "object" + }, + { + "type": "null" + } + ] + }, "completedAt": { "type": [ "string", + "formsEvidence": { + "type": "string" + }, "latestDomainScan": { "type": "string" }, + "formsSummary": { + "anyOf": [ + { + "additionalProperties": false, + "properties": { + "afterAcceptCapture": { + "enum": [ + "retained", + "limited", + "unavailable" + ], + "type": "string" + }, + "afterAcceptObserved": { + "anyOf": [ + { + "minimum": 0, + "type": "integer" + }, + { + "type": "null" + } + ] + }, + "contractVersion": { + "const": "certscore.forms-summary.v1", + "type": "string" + }, + "countStatus": { + "enum": [ + "captured", + "limited", + "not_captured" + ], + "type": "string" + }, + "preConsentCapture": { + "enum": [ + "complete", + "limited", + "unavailable" + ], + "type": "string" + }, + "preConsentObserved": { + "anyOf": [ + { + "minimum": 0, + "type": "integer" + }, + { + "type": "null" + } + ] + }, + "scope": { + "const": "starting_page_reportable_observations", + "type": "string" + }, + "totalObserved": { + "minimum": 0, + "type": "integer" + } + }, + "required": [ + "contractVersion", + "scope", + "totalObserved", + "preConsentObserved", + "afterAcceptObserved", + "preConsentCapture", + "afterAcceptCapture" + ], + "type": "object" + }, + { + "type": "null" + } + ] + }, "fullReport": { "additionalProperties": true, "properties": { + "accessibilityAudit": { + "anyOf": [ + { + "$ref": "#/properties/accessibilityAudit/anyOf/0" + }, + { + "type": "null" + } + ] + }, "agentInterpretation": { "$ref": "#/properties/summary/properties/agentInterpretation/anyOf/0" }, + "formsSummary": { + "anyOf": [ + { + "$ref": "#/properties/formsSummary/anyOf/0" + }, + { + "type": "null" + } + ] + }, "gpcResponse": { "anyOf": [ { + "scoreExplanation": { + "anyOf": [ + { + "$ref": "#/properties/scoreExplanation/anyOf/0" + }, + { + "type": "null" + } + ] + }, "summary": { "additionalProperties": true, "properties": { + "forms", "transport", - "report" + "report", + "accessibility", + "cmp", + "cms" ], "type": "string" }, - "forms" + "forms", + "accessibility", + "cmp", + "cms" ], "type": "string" } - "maxItems": 8, + "maxItems": 12, "type": "array" }, "interpretation": { + "scoreExplanation": { + "anyOf": [ + { + "additionalProperties": false, + "properties": { + "baseScore": { + "const": 100, + "type": "number" + }, + "contractVersion": { + "const": "certscore.score-explanation.v1", + "type": "string" + }, + "deductions": { + "items": { + "additionalProperties": false, + "properties": { + "deductionPoints": { + "exclusiveMinimum": 0, + "type": "integer" + }, + "family": { + "maxLength": 80, + "type": "string" + }, + "label": { + "maxLength": 160, + "type": "string" + }, + "rules": { + "items": { + "additionalProperties": false, + "properties": { + "decisionVerification": { + "enum": [ + "confirmed", + "unconfirmed", + "not_applicable", + "unknown" + ], + "type": "string" + }, + "findingIds": { + "items": { + "maxLength": 180, + "type": "string" + }, + "maxItems": 4, + "type": "array" + }, + "label": { + "maxLength": 160, + "type": "string" + }, + "policyDeductionPoints": { + "exclusiveMinimum": 0, + "type": "integer" + }, + "ruleId": { + "maxLength": 160, + "type": "string" + } + }, + "required": [ + "ruleId", + "label", + "policyDeductionPoints", + "findingIds", + "decisionVerification" + ], + "type": "object" + }, + "maxItems": 40, + "type": "array" + } + }, + "required": [ + "family", + "label", + "deductionPoints", + "rules" + ], + "type": "object" + }, + "maxItems": 16, + "type": "array" + }, + "policyVersion": { + "maxLength": 120, + "type": "string" + }, + "scope": { + "const": "starting_page_canonical_score", + "type": "string" + }, + "score": { + "maximum": 100, + "minimum": 0, + "type": "integer" + }, + "scoreFloor": { + "const": 0, + "type": "number" + }, + "scoreVersion": { + "maxLength": 120, + "type": "string" + }, + "totalPolicyDeductionPoints": { + "minimum": 0, + "type": "integer" + } + }, + "required": [ + "contractVersion", + "scope", + "scoreVersion", + "policyVersion", + "baseScore", + "scoreFloor", + "score", + "totalPolicyDeductionPoints", + "deductions" + ], + "type": "object" + }, + { + "type": "null" + } + ] + }, "scoreLabel": { "const": "CertScore score", "type": "string"
--- pinned/certscore_get_scan_status +++ observed/certscore_get_scan_status { "annotations": { "destructiveHint": false, + "accessibilityAudit": { + "anyOf": [ + { + "additionalProperties": false, + "properties": { + "affectedNodeCount": { + "anyOf": [ + { + "minimum": 0, + "type": "integer" + }, + { + "type": "null" + } + ] + }, + "durationMs": { + "anyOf": [ + { + "minimum": 0, + "type": "integer" + }, + { + "type": "null" + } + ] + }, + "engine": { + "const": "axe-core", + "type": "string" + }, + "engineVersion": { + "type": [ + "string", + "null" + ] + }, + "failedRuleCount": { + "anyOf": [ + { + "minimum": 0, + "type": "integer" + }, + { + "type": "null" + } + ] + }, + "required": { + "const": true, + "type": "boolean" + }, + "reviewRuleCount": { + "anyOf": [ + { + "minimum": 0, + "type": "integer" + }, + { + "type": "null" + } + ] + }, + "scope": { + "const": "starting_page_rendered_content", + "type": "string" + }, + "status": { + "enum": [ + "completed", + "limited", + "failed", + "not_testable" + ], + "type": "string" + } + }, + "required": [ + "status", + "required", + "scope", + "engine", + "engineVersion", + "durationMs", + "failedRuleCount", + "affectedNodeCount", + "reviewRuleCount" + ], + "type": "object" + }, + { + "type": "null" + } + ] + }, "completedAt": { "type": [ "string", + "formsSummary": { + "anyOf": [ + { + "additionalProperties": false, + "properties": { + "afterAcceptCapture": { + "enum": [ + "retained", + "limited", + "unavailable" + ], + "type": "string" + }, + "afterAcceptObserved": { + "anyOf": [ + { + "minimum": 0, + "type": "integer" + }, + { + "type": "null" + } + ] + }, + "contractVersion": { + "const": "certscore.forms-summary.v1", + "type": "string" + }, + "countStatus": { + "enum": [ + "captured", + "limited", + "not_captured" + ], + "type": "string" + }, + "preConsentCapture": { + "enum": [ + "complete", + "limited", + "unavailable" + ], + "type": "string" + }, + "preConsentObserved": { + "anyOf": [ + { + "minimum": 0, + "type": "integer" + }, + { + "type": "null" + } + ] + }, + "scope": { + "const": "starting_page_reportable_observations", + "type": "string" + }, + "totalObserved": { + "minimum": 0, + "type": "integer" + } + }, + "required": [ + "contractVersion", + "scope", + "totalObserved", + "preConsentObserved", + "afterAcceptObserved", + "preConsentCapture", + "afterAcceptCapture" + ], + "type": "object" + }, + { + "type": "null" + } + ] + }, "gpcResponse": { "anyOf": [ { + "formsEvidence": { + "type": "string" + }, "latestDomainScan": { "type": "string" }, + "scoreExplanation": { + "anyOf": [ + { + "additionalProperties": false, + "properties": { + "baseScore": { + "const": 100, + "type": "number" + }, + "contractVersion": { + "const": "certscore.score-explanation.v1", + "type": "string" + }, + "deductions": { + "items": { + "additionalProperties": false, + "properties": { + "deductionPoints": { + "exclusiveMinimum": 0, + "type": "integer" + }, + "family": { + "maxLength": 80, + "type": "string" + }, + "label": { + "maxLength": 160, + "type": "string" + }, + "rules": { + "items": { + "additionalProperties": false, + "properties": { + "decisionVerification": { + "enum": [ + "confirmed", + "unconfirmed", + "not_applicable", + "unknown" + ], + "type": "string" + }, + "findingIds": { + "items": { + "maxLength": 180, + "type": "string" + }, + "maxItems": 4, + "type": "array" + }, + "label": { + "maxLength": 160, + "type": "string" + }, + "policyDeductionPoints": { + "exclusiveMinimum": 0, + "type": "integer" + }, + "ruleId": { + "maxLength": 160, + "type": "string" + } + }, + "required": [ + "ruleId", + "label", + "policyDeductionPoints", + "findingIds", + "decisionVerification" + ], + "type": "object" + }, + "maxItems": 40, + "type": "array" + } + }, + "required": [ + "family", + "label", + "deductionPoints", + "rules" + ], + "type": "object" + }, + "maxItems": 16, + "type": "array" + }, + "policyVersion": { + "maxLength": 120, + "type": "string" + }, + "scope": { + "const": "starting_page_canonical_score", + "type": "string" + }, + "score": { + "maximum": 100, + "minimum": 0, + "type": "integer" + }, + "scoreFloor": { + "const": 0, + "type": "number" + }, + "scoreVersion": { + "maxLength": 120, + "type": "string" + }, + "totalPolicyDeductionPoints": { + "minimum": 0, + "type": "integer" + } + }, + "required": [ + "contractVersion", + "scope", + "scoreVersion", + "policyVersion", + "baseScore", + "scoreFloor", + "score", + "totalPolicyDeductionPoints", + "deductions" + ], + "type": "object" + }, + { + "type": "null" + } + ] + }, "scoreLabel": { "const": "CertScore score", "type": "string"
--- pinned/certscore_list_findings +++ observed/certscore_list_findings { "annotations": { "openWorldHint": true, + "formsEvidence": { + "type": "string" + }, "latestDomainScan": { "type": "string" },
--- pinned/certscore_scan_site +++ observed/certscore_scan_site { "annotations": { "destructiveHint": false, + "accessibilityAudit": { + "anyOf": [ + { + "additionalProperties": false, + "properties": { + "affectedNodeCount": { + "anyOf": [ + { + "minimum": 0, + "type": "integer" + }, + { + "type": "null" + } + ] + }, + "durationMs": { + "anyOf": [ + { + "minimum": 0, + "type": "integer" + }, + { + "type": "null" + } + ] + }, + "engine": { + "const": "axe-core", + "type": "string" + }, + "engineVersion": { + "type": [ + "string", + "null" + ] + }, + "failedRuleCount": { + "anyOf": [ + { + "minimum": 0, + "type": "integer" + }, + { + "type": "null" + } + ] + }, + "required": { + "const": true, + "type": "boolean" + }, + "reviewRuleCount": { + "anyOf": [ + { + "minimum": 0, + "type": "integer" + }, + { + "type": "null" + } + ] + }, + "scope": { + "const": "starting_page_rendered_content", + "type": "string" + }, + "status": { + "enum": [ + "completed", + "limited", + "failed", + "not_testable" + ], + "type": "string" + } + }, + "required": [ + "status", + "required", + "scope", + "engine", + "engineVersion", + "durationMs", + "failedRuleCount", + "affectedNodeCount", + "reviewRuleCount" + ], + "type": "object" + }, + { + "type": "null" + } + ] + }, "completedAt": { "type": [ "string", + "formsSummary": { + "anyOf": [ + { + "additionalProperties": false, + "properties": { + "afterAcceptCapture": { + "enum": [ + "retained", + "limited", + "unavailable" + ], + "type": "string" + }, + "afterAcceptObserved": { + "anyOf": [ + { + "minimum": 0, + "type": "integer" + }, + { + "type": "null" + } + ] + }, + "contractVersion": { + "const": "certscore.forms-summary.v1", + "type": "string" + }, + "countStatus": { + "enum": [ + "captured", + "limited", + "not_captured" + ], + "type": "string" + }, + "preConsentCapture": { + "enum": [ + "complete", + "limited", + "unavailable" + ], + "type": "string" + }, + "preConsentObserved": { + "anyOf": [ + { + "minimum": 0, + "type": "integer" + }, + { + "type": "null" + } + ] + }, + "scope": { + "const": "starting_page_reportable_observations", + "type": "string" + }, + "totalObserved": { + "minimum": 0, + "type": "integer" + } + }, + "required": [ + "contractVersion", + "scope", + "totalObserved", + "preConsentObserved", + "afterAcceptObserved", + "preConsentCapture", + "afterAcceptCapture" + ], + "type": "object" + }, + { + "type": "null" + } + ] + }, "gpcResponse": { "anyOf": [ { + "formsEvidence": { + "type": "string" + }, "latestDomainScan": { "type": "string" }, + "scoreExplanation": { + "anyOf": [ + { + "additionalProperties": false, + "properties": { + "baseScore": { + "const": 100, + "type": "number" + }, + "contractVersion": { + "const": "certscore.score-explanation.v1", + "type": "string" + }, + "deductions": { + "items": { + "additionalProperties": false, + "properties": { + "deductionPoints": { + "exclusiveMinimum": 0, + "type": "integer" + }, + "family": { + "maxLength": 80, + "type": "string" + }, + "label": { + "maxLength": 160, + "type": "string" + }, + "rules": { + "items": { + "additionalProperties": false, + "properties": { + "decisionVerification": { + "enum": [ + "confirmed", + "unconfirmed", + "not_applicable", + "unknown" + ], + "type": "string" + }, + "findingIds": { + "items": { + "maxLength": 180, + "type": "string" + }, + "maxItems": 4, + "type": "array" + }, + "label": { + "maxLength": 160, + "type": "string" + }, + "policyDeductionPoints": { + "exclusiveMinimum": 0, + "type": "integer" + }, + "ruleId": { + "maxLength": 160, + "type": "string" + } + }, + "required": [ + "ruleId", + "label", + "policyDeductionPoints", + "findingIds", + "decisionVerification" + ], + "type": "object" + }, + "maxItems": 40, + "type": "array" + } + }, + "required": [ + "family", + "label", + "deductionPoints", + "rules" + ], + "type": "object" + }, + "maxItems": 16, + "type": "array" + }, + "policyVersion": { + "maxLength": 120, + "type": "string" + }, + "scope": { + "const": "starting_page_canonical_score", + "type": "string" + }, + "score": { + "maximum": 100, + "minimum": 0, + "type": "integer" + }, + "scoreFloor": { + "const": 0, + "type": "number" + }, + "scoreVersion": { + "maxLength": 120, + "type": "string" + }, + "totalPolicyDeductionPoints": { + "minimum": 0, + "type": "integer" + } + }, + "required": [ + "contractVersion", + "scope", + "scoreVersion", + "policyVersion", + "baseScore", + "scoreFloor", + "score", + "totalPolicyDeductionPoints", + "deductions" + ], + "type": "object" + }, + { + "type": "null" + } + ] + }, "scoreLabel": { "const": "CertScore score", "type": "string"
Current tools
Show all 14 tool fingerprints
certscore_explain_finding
certscore_export_findings
certscore_get_connection_status
certscore_get_evidence
certscore_get_latest_domain_pre_consent_cookies_trackers
certscore_get_latest_domain_scan
certscore_get_pre_consent_cookies_trackers
certscore_get_report
certscore_get_report_evidence_page
certscore_get_scan
certscore_get_scan_bundle
certscore_get_scan_status
certscore_list_findings
certscore_scan_site
Watch this server yourself
If you run this server, put the proxy in front of it. It pins these exact fingerprints on first connect and stops the session if they move.
npx -y mcp-pin@0.2.3 -- <your @certscore/mcp command>
Or subscribe to this page's RSS feed to be told when it changes.
Badge
The badge states one fact about time and nothing else. It never claims a server is safe.
[](https://mcp-pin.gautamkhosla.com/servers/40ccb10212cff9eb.html)